| #4101 | WPA WooCommerce Product Gallery Slider Lite | 77 | 66 | 52 | 400 | | | Text Domain Mismatch |
| #4102 | Alx Extensions | 79 | 113 | 4 | 8k+ | | | Text Domain Mismatch |
| #4103 | Before After Image Comparison Slider for WPBakery Page Builder | 35 | 58 | 59 | 1k+ | | | Output is not escaped |
| #4104 | Black Bar | 69 | 78 | 39 | 500 | | | Short PHP open tag found |
| #4105 | Cache control by Cacholong | 41 | 87 | 30 | 500 | | | Non Singular String Literal Domain |
| #4106 | Canvas | 90 | 2 | 115 | 10k+ | | | Non-prefixed global variable |
| #4107 | Email Address Encoder | 41 | 109 | 8 | 100k+ | | | wp function not compatible with requires wp |
| #4108 | Header Footer Custom Html | 40 | 95 | 22 | 1k+ | | | Unsafe printing function |
| #4109 | OneSignal – Web Push Notifications | 38 | 53 | 64 | 70k+ | | | Output is not escaped |
| #4110 | Opal Woo Custom Product Variation | 43 | 1 | 116 | 400 | | | Non-prefixed global variable |
| #4111 | PHP Browser Detection | 28 | 68 | 49 | 600 | | | Non-prefixed function |
| #4112 | PostLinks | 38 | 107 | 10 | 700 | | | Output is not escaped |
| #4113 | Qubely – Advanced Gutenberg Blocks | 36 | 39 | 78 | 8k+ | | | Request data is not unslashed |
| #4114 | Simple Page Access Restriction | 41 | 66 | 51 | 6k+ | | | Unsafe printing function |
| #4115 | Universal Honey Pot | 40 | 23 | 94 | 1k+ | | | Missing nonce verification |
| #4116 | Payments via PayMongo for WooCommerce | 39 | 36 | 81 | 1k+ | | | Nonce verification recommended |
| #4117 | WC Provincia Canton Distrito | 48 | 103 | 14 | 1k+ | | | Text Domain Mismatch |
| #4118 | Advanced Custom Stock Status | 41 | 84 | 33 | 9k+ | | | Output is not escaped |
| #4119 | WPB Category Slider for WooCommerce – Responsive Product Category Carousel & Enhanced UX | 46 | 101 | 16 | 700 | | | Non Singular String Literal Domain |
| #4120 | Beautiful taxonomy filters | 64 | 38 | 78 | 2k+ | | | Non-prefixed global variable |
| #4121 | Change Mail Sender | 76 | 97 | 19 | 20k+ | | | Text Domain Mismatch |
| #4122 | CV Demo Importer | 64 | 21 | 95 | 400 | | | Non-prefixed global variable |
| #4123 | Eventer | 40 | 61 | 55 | 1k+ | | | Output is not escaped |
| #4124 | Events Calendar by FooEvents | 35 | 57 | 59 | 4k+ | | | Non-prefixed global variable |
| #4125 | Local Time Clock | 37 | 105 | 11 | 1k+ | | | Output is not escaped |
| #4126 | Logo Carousel Slider | 49 | 102 | 14 | 6k+ | | | Non Singular String Literal Domain |
| #4127 | MB Custom Post Types & Custom Taxonomies | 50 | 61 | 55 | 10k+ | | | Missing Translators Comment |
| #4128 | Contact Form & SMTP Plugin for WordPress by PirateForms | 93 | 14 | 102 | 30k+ | | | Non-prefixed hook name |
| #4129 | Product Expiry for WooCommerce | 41 | 31 | 85 | 2k+ | | | Request data is not unslashed |
| #4130 | Role Based Redirect | 40 | 20 | 96 | 2k+ | | | Non-prefixed global variable |
| #4131 | Sinatra Core | 40 | 101 | 15 | 8k+ | | | Output is not escaped |
| #4132 | Starter Sites & Templates by Neve | 35 | 28 | 88 | 100k+ | | | Non-prefixed hook name |
| #4133 | Trash Duplicate and 301 Redirect | 38 | 13 | 103 | 1k+ | | | Nonce verification recommended |
| #4134 | WC-AC Hook | 38 | 44 | 72 | 1k+ | | | Missing nonce verification |
| #4135 | Wheel of Life: Coaching and Assessment Tool for Life Coach | 78 | 3 | 113 | 3k+ | | | Non-prefixed global variable |
| #4136 | Conditional Display for Mobile – Mobile Detect Plugin | 48 | 4 | 112 | 2k+ | | | Input is not sanitized |
| #4137 | Instamojo for WooCommerce | 48 | 72 | 44 | 4k+ | | | Text Domain Mismatch |
| #4138 | Export WordPress Menus | 69 | 94 | 22 | 1k+ | | | wp function not compatible with requires wp |
| #4139 | ARI Fancy Lightbox – Popup for WordPress | 62 | 8 | 107 | 10k+ | | | Non-prefixed namespace |
| #4140 | ExS Widgets | 98 | 112 | 3 | 1k+ | | | Text Domain Mismatch |
| #4141 | Furgonetka.pl: Przesyłki & Narzędzia e-commerce | 37 | 67 | 48 | 7k+ | | | Exception output is not escaped |
| #4142 | GF Mollie by Indigo | 39 | 82 | 33 | 900 | | | Exception output is not escaped |
| #4143 | HashThemes Demo Importer | 38 | 71 | 44 | 6k+ | | | Output is not escaped |
| #4144 | Intuitive Custom Post Order | 75 | 19 | 96 | 400k+ | | | Direct Query |
| #4145 | MAS Company Reviews For WP Job Manager | 40 | 44 | 71 | 1k+ | | | Output is not escaped |
| #4146 | Material Design Icons for Page Builders | 46 | 69 | 46 | 20k+ | | | Missing direct file access protection |
| #4147 | MaxLimits – Increase Maximum Upload, Post & PHP Limits | 41 | 99 | 16 | 2k+ | | | Unsafe printing function |
| #4148 | Posts 2 Posts | 41 | 42 | 73 | 10k+ | | | Non Singular String Literal Domain |
| #4149 | Presto Player | 35 | 37 | 78 | 100k+ | | | Missing Arg Domain |
| #4150 | Recent Posts Plus | 38 | 111 | 4 | 1k+ | | | Output is not escaped |